2011

The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to bypass W

Bugzilla 4.1.x before 4.1.3 generates different responses for certain assignee queries depending on whether the group na

Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x befor

Cross-site scripting (XSS) vulnerability in Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, and 3.4.x before 3.4.1

CRLF injection vulnerability in Bugzilla 2.17.1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x b

Bugzilla 2.23.3 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before

Cross-site scripting (XSS) vulnerability in Bugzilla 2.4 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x

The Android browser in Android cannot properly restrict modifications to cookies established in HTTPS sessions, which al

Opera cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle at

Apple Safari cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-mi

Microsoft Internet Explorer cannot properly restrict modifications to cookies established in HTTPS sessions, which allow

Google Chrome before 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which al

Mozilla Firefox before 4 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows m

Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attacker

The default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains certain domain names in t

Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attack

The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which al

The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x before 1.9.2-p290 reli

Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attacker

Cross-site scripting (XSS) vulnerability in skins/plone_templates/default_error_message.pt in Plone before 2.5.3 allows

The ocsp_check function in rlm_eap_tls.c in FreeRADIUS 2.1.11, when OCSP is enabled, does not properly parse replies fro

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handli

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy and conduct script injection

Google Chrome before 13.0.782.107 does not properly handle nested functions in PDF documents, which allows remote attack

Google Chrome before 13.0.782.107 does not properly handle Skia paths, which allows remote attackers to cause a denial o

Google V8, as used in Google Chrome before 13.0.782.107, does not properly perform const lookups, which allows remote at

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Google Chrome before 13.0.782.107 allows remote attackers to obtain potentially sensitive information about client-side

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Google Chrome before 13.0.782.107 does not properly restrict access to internal schemes, which allows remote attackers t

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Use-after-free vulnerability in Skia, as used in Google Chrome before 13.0.782.107, allows remote attackers to cause a d

Google Chrome before 13.0.782.107 does not prevent calls to functions in other frames, which allows remote attackers to

Google Chrome before 13.0.782.107 does not properly perform text iteration, which allows remote attackers to cause a den

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

The International Components for Unicode (ICU) functionality in Google Chrome before 13.0.782.107 allows remote attacker

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service o

Buffer overflow in the inspector serialization functionality in Google Chrome before 13.0.782.107 allows user-assisted r

Google Chrome before 13.0.782.107 does not properly address re-entrancy issues associated with the GPU lock, which allow

Google Chrome before 13.0.782.107 does not ensure that the speech-input bubble is shown on the product's screen, which m

The extensions implementation in Google Chrome before 13.0.782.107 does not properly validate the URL for the home page,

Google Chrome before 13.0.782.107 does not ensure that developer-mode NPAPI extension installations are confirmed by a b

The drag-and-drop implementation in Google Chrome before 13.0.782.107 on Linux does not properly enforce permissions for

The Basic Authentication dialog implementation in Google Chrome before 13.0.782.107 does not properly handle strings, wh

Google Chrome before 13.0.782.107 does not ensure that the user is prompted before download of a dangerous file, which m

Google Chrome before 13.0.782.107 does not properly track line boxes during rendering, which allows remote attackers to

Google Chrome before 13.0.782.107 does not ensure that extension installations are confirmed by a browser dialog, which